CVE-2022-20699
CRITICAL KEVCisco RV340, RV340W, RV345, RV345P Firmware < 1.0.03.24 - Unauthenticated Remote Code Execution
Title source: llmExploitation Summary
CVE-2022-20699 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 3, 2022.
EIP tracks 4 public exploits from researchers including Audiobahn, puckiestyle, Pedro Ribeiro <[email protected]>, including a Metasploit module exploits/linux/misc/cisco_rv340_sslvpn.
AI-analyzed exploit summary This PoC exploits a stack-based buffer overflow in Cisco RV340 WAN's SSL VPN service (CVE-2022-20699) to achieve unauthenticated remote code execution. It sends a crafted payload to trigger the vulnerability via an HTTP POST request to port 8443.
Description
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
Exploits (4)
This PoC exploits a stack-based buffer overflow in Cisco RV340 WAN's SSL VPN service (CVE-2022-20699) to achieve unauthenticated remote code execution. It sends a crafted payload to trigger the vulnerability via an HTTP POST request to port 8443.
This PoC exploits a stack-based buffer overflow in Cisco AnyConnect VPN (CVE-2022-20699) to achieve unauthenticated remote code execution. It sends a crafted payload to trigger the vulnerability via an HTTP POST request to the target's SSL VPN service.
The repository contains a functional exploit for CVE-2022-20699, a stack-based buffer overflow in Cisco RV340 VPN Gateway's SSL VPN service. The exploit includes a Python script that crafts a malicious payload to achieve remote code execution as root, along with a detailed technical writeup explaining the vulnerability and exploitation process.
This Metasploit module exploits a stack buffer overflow in Cisco RV340 SSL VPN (CVE-2022-20699) to achieve unauthenticated remote code execution. It uses custom ARMLE shellcode to establish a reverse root shell, targeting firmware versions <= 1.0.03.24.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H